[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Network security manager

From: Ted Zlatanov
Subject: Re: Network security manager
Date: Tue, 18 Nov 2014 16:23:36 -0500
User-agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/25.0.50 (gnu/linux)

On Tue, 18 Nov 2014 21:50:36 +0100 Toke Høiland-Jørgensen <address@hidden> 

TH> Well, DANE allows for storing certificate info in DNS and verifying its
TH> integrity with DNSSEC. This has the nice property that no CA is needed,
TH> and can give as good or stronger guarantees on cert integrity as
TH> verifying against a CA can.

TH> The downside is that it's not terribly widely deployed yet, and also
TH> that it requires working DNSSEC support to work.

I think it makes sense as a feature for later, definitely.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]